$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3afb08d9-b761-3e41-a7fa-5a474eee1fc7.roa File: 3afb08d9-b761-3e41-a7fa-5a474eee1fc7.roa (raw, json) Hash identifier: hjPoP+p2kUUR1n4uUyYhys1xsFr7RGFRHzdKECK0DhE= Subject key identifier: 08:2F:E2:2A:10:FD:7C:F5:02:E2:99:0A:7D:BD:E2:30:3E:18:3F:05 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584E3B9484BFDAD7D875C798F660 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3afb08d9-b761-3e41-a7fa-5a474eee1fc7.roa Signing time: Sat 20 Jun 2026 09:00:13 +0000 ROA not before: Sat 20 Jun 2026 09:00:13 +0000 ROA not after: Fri 18 Sep 2026 09:00:13 +0000 asID: 22616 IP address blocks: 170.85.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3b:94:84:bf:da:d7:d8:75:c7:98:f6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jun 20 09:00:13 2026 GMT Not After : Sep 18 09:00:13 2026 GMT Subject: CN=e41eab7b-9ad9-4067-88ee-67e0760fde24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cd:f3:78:9b:2f:cc:a1:5d:3c:dc:00:26:6f: b9:76:67:8f:5b:7c:f4:5b:26:92:12:fa:14:8c:41: 8c:a9:de:95:d1:b1:d1:d5:bd:1d:5b:07:c9:f6:3c: 9a:ea:8f:af:8b:7e:78:f3:b0:5a:48:87:7a:02:6e: ec:52:64:8f:32:41:9a:55:23:f9:d3:bb:4f:c6:dc: 8c:04:ed:0c:22:ac:26:43:a9:cb:7b:47:23:dd:08: 18:5d:af:7f:8c:b9:b6:16:f1:a6:21:a6:32:2b:84: e0:6e:8a:56:70:1f:15:eb:5e:73:be:60:9c:de:d3: bb:5d:f8:63:34:74:ba:1e:88:75:c7:85:c7:58:7f: 49:3a:68:09:ca:70:c2:58:1d:ba:8d:e0:d9:4b:0e: 6d:16:74:f5:4f:27:21:ae:b2:7a:ee:2b:42:52:6a: 17:c8:e5:ef:b2:7f:a6:06:24:e3:83:6e:10:7f:c0: 91:17:ef:13:ac:22:bd:eb:85:cd:ad:70:e6:c5:49: d7:9e:e3:78:03:c9:72:1a:d1:7b:56:f3:a8:81:90: 93:4b:78:c3:37:83:b9:df:ec:b6:ab:f3:86:45:ed: 1d:e0:d2:9c:2e:bc:f1:85:58:83:54:e8:73:e0:4a: 1d:1c:17:b2:81:d2:df:d7:b9:8a:e9:19:29:16:db: 55:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2F:E2:2A:10:FD:7C:F5:02:E2:99:0A:7D:BD:E2:30:3E:18:3F:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3afb08d9-b761-3e41-a7fa-5a474eee1fc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:03:96:98:c1:a0:1f:da:fc:5d:50:94:e5:b7:96:b5:c7:37: fc:3e:51:42:b2:f2:9f:31:fa:24:2e:2d:61:bc:8b:35:91:d4: f5:fe:1c:e0:ad:03:b5:cf:81:75:38:cf:f5:cf:f1:0b:9f:69: bf:9f:15:20:46:3d:77:bd:6c:9f:f9:0f:b9:51:7a:b5:80:4c: 6b:92:6b:4f:06:0a:ac:c4:51:2d:26:d5:6c:6b:74:51:88:80: 5e:64:75:91:7d:b1:7d:f6:40:fb:4f:fd:52:e9:fe:37:ff:f2: ab:9c:76:58:ed:8d:81:41:2e:c8:ef:cb:01:16:2e:26:32:14: 54:4d:3b:43:2a:fd:b4:6f:e1:e7:48:87:92:49:49:a5:fe:38: 3e:49:f9:43:d2:02:9e:b4:46:0d:8f:87:ec:11:2b:70:70:cf: 32:88:2c:45:63:7d:bd:fd:48:42:21:ed:19:6e:c1:52:e5:7f: 56:ff:8e:9f:db:94:be:f8:e3:4b:13:69:5e:f4:25:52:c5:b6: 90:50:33:a0:75:04:59:13:e9:13:54:9d:3e:36:ea:91:6d:0d: 9b:7c:4d:db:a0:63:f4:53:15:fd:96:ae:45:ea:5c:45:da:a3: 83:01:88:50:68:a4:5b:4b:ed:1c:9e:4b:c3:16:7e:05:bc:b8: 20:15:86:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE47lIS/2tfYdceY9mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDYyMDA5MDAxM1oXDTI2MDkxODA5MDAxM1owLzEtMCsGA1UEAxMk ZTQxZWFiN2ItOWFkOS00MDY3LTg4ZWUtNjdlMDc2MGZkZTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM3zeJsvzKFdPNwAJm+5dmePW3z0WyaSEvoU jEGMqd6V0bHR1b0dWwfJ9jya6o+vi35487BaSId6Am7sUmSPMkGaVSP507tPxtyM BO0MIqwmQ6nLe0cj3QgYXa9/jLm2FvGmIaYyK4TgbopWcB8V615zvmCc3tO7Xfhj NHS6Hoh1x4XHWH9JOmgJynDCWB26jeDZSw5tFnT1TychrrJ67itCUmoXyOXvsn+m BiTjg24Qf8CRF+8TrCK964XNrXDmxUnXnuN4A8lyGtF7VvOogZCTS3jDN4O53+y2 q/OGRe0d4NKcLrzxhViDVOhz4EodHBeygdLf17mK6RkpFttVFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgv4ioQ/Xz1AuKZCn294jA+GD8FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2FmYjA4ZDktYjc2MS0z ZTQxLWE3ZmEtNWE0NzRlZWUxZmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlWuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8DlpjBoB/a/F1QlOW3lrXHN/w+UUKy8p8x+iQuLWG8izWR1PX+HOCt A7XPgXU4z/XP8Qufab+fFSBGPXe9bJ/5D7lRerWATGuSa08GCqzEUS0m1WxrdFGI gF5kdZF9sX32QPtP/VLp/jf/8qucdljtjYFBLsjvywEWLiYyFFRNO0Mq/bRv4edI h5JJSaX+OD5J+UPSAp60Rg2Ph+wRK3BwzzKILEVjfb39SEIh7RluwVLlf1b/jp/b lL7440sTaV70JVLFtpBQM6B1BFkT6RNUnT426pFtDZt8TdugY/RTFf2WrkXqXEXa o4MBiFBopFtL7RyeS8MWfgW8uCAVhiY= -----END CERTIFICATE-----Generated at Fri Jul 24 00:25:18 2026 by rpki-client